CVE-2025-1121

Descripción

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://issuetracker.google.com/issues/336153054 Issue TrackingVendor Advisory
• https://issues.chromium.org/issues/b/336153054 Broken LinkIssue TrackingVendor Advisory